procmail
[Top] [All Lists]

Re: Ninda worm

2001-09-20 13:05:24
A couple of people have asked something like:

Can you forward me a copy of your "sample" or post a location where
I can download it? I would like to test my filters.

I've put a copy of one such message as it arrived at zanshin -- except
with all but the first and last lines of the payload deleted, and the
sender's address obscured -- at:

        ftp://gamera.zanshin.com/pub/nimda.sample

Just so it's clear, the From: header in this sample has been edited and
should NOT be used for recognizing the virus.

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>